Commit d9e74368 authored by David S. Miller's avatar David S. Miller

[IPSEC]: RAWv4 makes inverted policy check.

parent c60a1794
...@@ -238,7 +238,7 @@ static int raw_rcv_skb(struct sock * sk, struct sk_buff * skb) ...@@ -238,7 +238,7 @@ static int raw_rcv_skb(struct sock * sk, struct sk_buff * skb)
int raw_rcv(struct sock *sk, struct sk_buff *skb) int raw_rcv(struct sock *sk, struct sk_buff *skb)
{ {
if (xfrm_policy_check(sk, XFRM_POLICY_IN, skb)) { if (!xfrm_policy_check(sk, XFRM_POLICY_IN, skb)) {
kfree_skb(skb); kfree_skb(skb);
return NET_RX_DROP; return NET_RX_DROP;
} }
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment